sodium-javascript - npm Package Compare versions

Comparing version 0.0.1 to 0.1.0

index.js

@@ -2165,17 +2165,2 @@ 'use strict';
 
-var blake2b = require('blakejs/blake2b')
-
-function crypto_generichash (out, data, key) {
-  var tmp = blake2b.blake2b(data, key, out.length)
-  for (var i = 0; i < tmp.length; i++) out[i] = tmp[i]
-}
-
-function crypto_generichash_batch (out, batch, key) {
-  var i = 0
-  var ctx = blake2b.blake2bInit(out.length, key)
-  for (i = 0; i < batch.length; i++) blake2b.blake2bUpdate(ctx, batch[i])
-  var tmp = blake2b.blake2bFinal(ctx)
-  for (var i = 0; i < tmp.length; i++) out[i] = tmp[i]
-}
-
 var crypto_secretbox_KEYBYTES = 32,
@@ -2199,2 +2184,6 @@ crypto_secretbox_NONCEBYTES = 24,
 
+sodium.memzero = function (len, offset) {
+  for (var i = offset; i < len; i++) arr[i] = 0;
+}
+
 sodium.randombytes_buf = randombytes_buf
@@ -2213,2 +2202,4 @@
 
+forward(require('./crypto_generichash'))
+
 sodium.crypto_stream_KEYBYTES = 32
@@ -2230,11 +2221,2 @@ sodium.crypto_stream_NONCEBYTES = 24
 
-sodium.crypto_generichash_BYTES_MIN = 16
-sodium.crypto_generichash_BYTES_MAX = 64
-sodium.crypto_generichash_BYTES = 32
-sodium.crypto_generichash_KEYBYTES_MIN = 16
-sodium.crypto_generichash_KEYBYTES_MAX = 64
-sodium.crypto_generichash_KEYBYTES = 32
-sodium.crypto_generichash = crypto_generichash
-sodium.crypto_generichash_batch = crypto_generichash_batch
-
 function cleanup(arr) {
@@ -2248,2 +2230,8 @@ for (var i = 0; i < arr.length; i++) arr[i] = 0;
 
+function forward (submodule) {
+  Object.keys(submodule).forEach(function (prop) {
+    module.exports[prop] = submodule[prop]
+  })
+}
+
 (function() {
@@ -2250,0 +2238,0 @@ // Initialize PRNG if environment provides CSPRNG.

package.json

 {
   "name": "sodium-javascript",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "description": "WIP - a pure javascript version of sodium-native",
   "main": "index.js",
   "dependencies": {
-    "blakejs": "^1.0.1"
+    "blake2b": "^1.2.0"
   },
-  "devDependencies": {},
+  "devDependencies": {
+    "sodium-test": "^0.2.0"
+  },
   "repository": {
@@ -11,0 +13,0 @@ "type": "git",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

74515

increased by22.24%

Number of package files

12

increased by100%

Lines of code

2400

increased by20.54%

Worsened metrics

Dev dependency count

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedblake2b@^1.2.0

• + Addedblake2b@1.2.0(transitive)

• - Removedblakejs@^1.0.1

• - Removedblakejs@1.2.1(transitive)